About This Policy
Thrive United Physio is committed to protecting your privacy and the personal information you provide to us. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the Australian Privacy Principles and the Privacy Act 1988 (Cth).
As a healthcare provider working with NDIS participants, we take our privacy obligations seriously and handle all personal and sensitive information with care and respect.
Information We Collect
We may collect the following types of personal information:
- Contact details: Name, address, phone number, email address
- NDIS information: NDIS number, funding type, plan details
- Health information: Medical history, diagnoses, treatment records, physiotherapy notes
- Support network details: Family member or support coordinator contact information
- Service records: Appointment history, progress notes, goals, and outcomes
How We Collect Information
We collect personal information:
- Directly from you or your authorised representative when you complete our referral form or contact us
- From your support coordinator, plan manager, or family member with your consent
- From other healthcare providers involved in your care (with your consent)
- Through our website when you submit enquiries or referrals
How We Use Your Information
We use your personal information to:
- Provide physiotherapy services and coordinate your care
- Communicate with you about appointments and treatment
- Process NDIS claims and manage billing
- Prepare reports for the NDIA, support coordinators, or other healthcare providers
- Meet our legal and professional obligations
- Improve our services and respond to feedback
Who We Share Information With
We may share your information with:
- The National Disability Insurance Agency (NDIA) for claims and reporting
- Your support coordinator or plan manager (with your consent)
- Other healthcare providers involved in your care (with your consent)
- Professional supervisors or mentors (in a de-identified format for quality assurance)
- Government agencies when required by law
We will never sell or share your personal information for marketing purposes.
How We Protect Your Information
We take reasonable steps to protect your personal information from misuse, loss, and unauthorised access. This includes:
- Secure storage of physical and electronic records
- Password protection and encryption for digital systems
- Staff training on privacy and confidentiality
- Regular review of our security practices
Your Rights
You have the right to:
- Access the personal information we hold about you
- Request corrections to inaccurate or outdated information
- Ask how your information has been used or disclosed
- Make a complaint if you believe your privacy has been breached
To exercise any of these rights, please contact us using the details below.
Retention of Information
We retain your personal and health information for as long as required by law and professional standards. For health records, this is generally a minimum of 7 years from your last appointment (or until you turn 25 if you were a child when treated).
Contact Us
If you have any questions about this Privacy Policy or wish to make a complaint, please contact us:
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).